siem-on-amazon-opensearch-service icon indicating copy to clipboard operation
siem-on-amazon-opensearch-service copied to clipboard

Published 20 hours ago • verified publisher icon aws-samples

Cannot import OpenSearch Dashboard's configuration files from dashboard.ndjson

Open uniuuu opened this issue 11 months ago • 5 comments

Dear @nakajiak

When trying to import dashboards from saved_objects.zip it returns error Sorry, there was an error The file could not be processed due to error: "", see it on the screenshot Screenshot from 2024-03-13 23-51-55

uniuuu avatar Mar 13 '24 16:03 uniuuu

@nakajiak Please note, SIEM on Amazon OpenSearch Service has been deployed via cdk.

uniuuu avatar Mar 15 '24 18:03 uniuuu

Hello

Please provide the following information:

  • Version of SIEM on OpenSearch
  • Version of Amazon OpenSearch
  • Result of the following command:
    • ls -l dashboard.ndjson
    • jq empty < dashboard.ndjson 2>&1 > /dev/null

nakajiak avatar Mar 30 '24 23:03 nakajiak

Hi @nakajiak. Thank you for you reply. Please see the details below: Version of SIEM on OpenSearch: commit: 8a0b92e3a64d9879d585d18b4c87cd78b1f83363 (after v2.10.2a) Version of Amazon OpenSearch: from dashboard v 2.9.0 ; Service software version: OpenSearch_2_9_R20230928-P3 (latest) Result of the commands: image

uniuuu avatar Apr 02 '24 04:04 uniuuu

Hi, thanks for the information. dashboards.json looks like a correct JSON file. Did you import dashboards.json instead of saved_objects.zip? If so, it's not a template issue, it's an OpenSearch Service issue. Please contact AWS Support.

nakajiak avatar Apr 02 '24 05:04 nakajiak

Hi @nakajiak To which OpenSearch version that had no issue with the template can we regress? We use Basic Support plan and it doesn't allow to submit technical issue to AWS Support. If to import zip then the error will be different Screenshot from 2024-04-05 00-09-25

uniuuu avatar Apr 04 '24 17:04 uniuuu